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Claim Amendments 



1-16. (Cancelled) 

17. (Currently amended) A secure intermediation method performed by an 
intermediary positioned along a communication path between a client node and a server node, 
comprising: 

receiving a session request from the client node, wherein the session request is a request 
to initiate secure communications between the client node and the server node; 
sending to the client node a certificate in response to the session request: 
establishing a first secure session between the client node and the intermediary: 
in respons e to r e c e iving th e s e ssion r e qu e st, establishing a second secure session between 
the intermediary and the server node : and 

after establishing the first and second secure sessions, (i) receiving date a payment 
message from the client node, (ii^ detecting that the payment message includes an account 
number, (iii) modifying the payment message by replacing the account number with a limited- 
use payment number from a payment server, and (iv) sending the rocoivod data modified 
payment message to the server node over the second secure session. 

18. (Original) The method of claim 17, wherein the first and second secure 
sessions is are secure socket layer sessions. 



1 



19. (Currently amended) In a secure intermediation system, a method p e rformed at a 
client node comprising: 

sending from a client node a session request addressed to a server node, wherein the 
session request comprises a request to initiate a secure socket layer session between the client 
node and the server node; 

receiving at the client node a certificate in response to the session request; 

determining at the client node that the certificate corresponds to an intermediary 
positioned along a communications path between the client node and the server node; «id 

establishing a first secure session between the client node and the intermediary; 

establishing a second secure session between the intermediary and the server node; 

receiving at the intermediary from the client node a payment message including an 
account number; 

modifying the payment message at the intermediary by replacing the account number 

with a limited-use payment number received from a payment server; and 

sending the modified payment message from the intermediary to the server node . 

20. (Currently amended) An intermediation system comprising: 

a processor for executing logic; 

session request logic executable on the processor and operative to detect a session request 
sent from ^ a client node, wherein the session request comprises a request to initiate a secure 
session between the client node and ^ a server node; 

session initiation logic executable on the processor and operative to establish a first 
secure session with the client node and a second secure session with the server node, the session 
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initiation logic being responsive to the detection of the session request by the session request 
logic; a»d 

linking logic executable on the processor and operative to enable communication 
between the client node and the server node by linking the first secure session with the second 

secure session ; 

account-number detection logic executing on a processor and operative to determine that 
a message sent by the client node is a payment message that includes an account number; 

payment number request logic executing on a processor and operative to request a 
limited-use payment number from a payment server; and 

modification logic executing on a processor and operative to modify the payment 
message by replacing the account number with the limited-use payment number . 

21. (Cancelled) 

22. (Original) The system of claim 21, wherein the first and second secure 
sessions is-a are secure socket layer sessions. 

23. (Currently amended) A secure intermediation system, comprising: 
a network interface; 

a processor; and 

data storage, wherein the data storage stores instructions executable by the processor (i) 

to receive a session request from tfee a client node, wherein the session request comprises a 
request to initiate secure communications between the client node and the a server node; (ii) to 
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establish a first secure session between the intermediary and with the server in response to 
receiving the session request; (iii) to establish a second secure session between the intermediary 
and the server in response to receiving the session request: (iv) to receive 4ata a payment 
message from the client node after establishing the first and second secure sessio n, wherein the 
payment message includes an account number ; (v) to modify the payment message by replacing 
the account number with a limited use payment number received from a payment server, and {i¥) 
(vi) to send the r e c e iv e d data modified payment message to the server over the second secure 
session. 

24. (New) The method of claim 17, wherein the account number is a credit card 
number. 

25. (New) The method of claim 17, further comprising sending a verification 

message to the client node after detecting the payment message includes the account number, 
wherein the verification message prompts a user of the client node to approve replacement of the 
account number. 

26. (New) The method of claim 17, further comprising requesting the limited-use 
payment number from said payment server. 

27. (New) The method of claim 19, wherein the account number is a credit card 
number. 
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28. (New) The method of claim 19, further comprising sending a verification 
message to the client node to prompt a user of the client node to approve replacement of the 
account number. 

29. (New) The method of claim 19, further comprising requesting the limited-use 
pajnnent number from said payment server. 

30. (New) The system of claim 20, wherein the account number is a credit card 
number. 

31. (New) The system of claim 20, wherein the account-number detection logic is 
further operative to send a verification message to the client node to prompt a user of the client 
node to approve replacement of the account number. 

32. (New) The system of claim 23, wherein the account number is a credit card 
number. 

33. (New) The system of claim 23, wherein the instructions are fiirther executable by 
the processor to send a verification message to the client node to prompt a user of the client node 
to approve replacement of the account number. 

34. (New) The system of claim 23, wherein the instructions are fiirther executable by 
the processor to request the limited-use payment number from said payment server. 
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